Sub-processors

Version 2026-09-23. Providers that process personal data on behalf of Stellar Reviews customers, as set out in section 7 of the Data Processing Agreement. Any addition or replacement is notified to customers by email at least 30 days in advance.

Provider	Service	Data location	Transfer safeguard
Apify Technologies s.r.o. (Czech Republic)	Extraction of public reviews from platforms	EU	No transfer
Anthropic Ireland Ltd (Ireland)	AI model (Claude) for drafts and translations	EU and USA	Standard Contractual Clauses; inputs and outputs kept 30 days and not used for training
Neon Inc. (USA)	Managed database	EU (Frankfurt, on AWS)	Standard Contractual Clauses
Vercel Inc. (USA)	Hosting of the application and engine	Functions in the EU (Frankfurt); global delivery network	Data Privacy Framework and Standard Contractual Clauses
Plus Five Five Inc., "Resend" (USA)	Sign-in and notification emails	USA	Data Privacy Framework and Standard Contractual Clauses

Independent controllers

These parties do not process data on behalf of customers, but for their own purposes:

• Link (Stripe): sells paid plans as merchant of record and processes payment and billing data under its own privacy notice.
• Google, TripAdvisor, Booking.com and the other platforms: publish the reviews and are their controllers; Stellar Reviews has no contractual relationship with them.